Pricing
One credit.
One governance run.
Every credit buys a full PR governance run, covering all five agents in parallel, SHA-256 signed evidence committed to your repo. Free tier gives you 5 one-time welcome runs to get started.
What is a credit
1 credit = 1 full PR governance run
All 5 governance agents (security, finance, privacy, compliance, and data) run in parallel on your pull request. A SHA-256 signed evidence.json is committed to your repo. That is one credit.
Free
$0
5 one-time welcome runs
no card required
- All 5 governance agents
- evidence.json per PR
- BYOK (unlimited)
- No credit card
5 runs to try the full platform. No monthly reset. Upgrade when ready.
Starter
$8 / mo
8 PR governance runs / month
renews monthly
- Everything in Free
- 8 credits monthly
- Credit Pack available
- Cancel anytime
Good for occasional PR review on active projects.
Pro
$20 / mo
20 PR governance runs / month
renews monthly
- Everything in Starter
- 20 credits monthly
- Credit Pack available
- Cancel anytime
Most popular. Good for solo developers with active PR flow.
Business
$40 / seat / mo
40 PR governance runs / seat / month
Available now
- Centralised billing
- 40 credits / seat / month
- Usage dashboard
Coming Q2 2026
- Team admin & user management
- Shared policy enforcement
- Centralised API key rotation
For engineering teams. Single invoice.
Free scanner at /scan/: scan any public GitHub repo on demand. No account, no credits, no sign-in. Six heuristic analysis layers, health score, shareable results.
Scanner Pro at /scan/ → Pro tab: runs bandit, semgrep, checkov, detect-secrets, pip-audit, and ruff inside a container Lambda. Findings carry method_label: "tool_verified" — formally citeable in governance evidence chains. 1 credit per scan.
Credit Pack
5 additional PR governance runs. Never expire.
Available on any tier. Stack multiple packs. Top up before a governance review sprint or a big release. Credits never expire. They carry forward indefinitely, through plan changes and cancellations.
- 5 credits per pack
- Never expire
- Stack multiple packs
- Available on any plan
Credit Packs are available from your account dashboard.
Estate Audit
Whole-estate RST scoring.
For organisations that need more than PR governance — a full picture of where every system, platform, and cloud account sits on the RST scale.
Self-serve
Credits
Deploy a connector Lambda in your own AWS account. Each connector scan consumes credits from your existing plan. Findings feed directly into the estate scatter plot.
- AWS, Salesforce connectors available now
- Configure via SSM Parameter Store
- Credentials stay in your account
- Entra ID, M365, GCP coming Q3 2026
Managed — Q3 2026
Managed scan
ticketyboo runs the connectors on your behalf on a scheduled cadence. No infrastructure required. Estate dashboard updated automatically.
- Weekly or monthly cadence
- You provide read-only credentials once
- Full RST report delivered
- Pricing on application
Consulting
From £5,000
Ian deploys the connectors, runs the audit, and presents findings with remediation recommendations. Includes a full written estate report and one RST roadmap workshop.
- Discovery, scoring, remediation planning
- All connectors included
- Written report + RST roadmap
- Follow-on retainer available
Questions
What is a credit?
1 credit = 1 full PR governance run. All 5 governance agents (security, finance, privacy, compliance, and data) run in parallel on your PR. A SHA-256 signed evidence.json is committed to your repo as the auditable output.
Does unused roll over?
Not currently. Credits from your monthly plan reset on the 1st of each month. The Credit Pack ($5 for 5 credits) never expires. Those carry forward indefinitely regardless of plan changes.
Can I cancel anytime?
Yes. Cancel at any time. Access continues until the end of your billing period. No lock-in, no cancellation fee.
What's the difference between Pro and Business?
Business adds per-seat billing and is designed for engineering teams. One invoice covers the whole team. Team admin and shared policy enforcement features are coming Q2 2026. If you're a solo developer, Pro is the right choice.
Is BYOK supported?
Yes. Bring your own Anthropic or OpenAI API key. ticketyboo works as a managed billing layer or routes directly to your key. BYOK is available on all tiers, including Free, and usage against your own key is unlimited.
How does the free scanner differ from Scanner Pro and governance credits?
The free scanner at /scan/ runs six heuristic layers on any public repo — no account, no credits. Scanner Pro (1 credit per scan) runs six production security tools (bandit, semgrep, checkov, detect-secrets, pip-audit, ruff) in a container Lambda. Findings carry method_label: "tool_verified", making them formally citeable in governance evidence chains. Governance credits power the GitHub App: automated PR enforcement with all 5 agents and a SHA-256 signed evidence.json committed to your repo.
What happens when I run out of credits?
The GitHub App returns a 402 and posts a comment to your PR noting that no credits remain. No silent overages. No surprise bills. Hard cap only. Buy a Credit Pack from your dashboard to top up instantly.